@phdthesis{Andersen94,
   author = "Lars Ole Andersen",
   title = "Program Analysis and Specialization for the C Programming Language",
   school = "DIKU, University of Copenhagen",
   year = "1994"
}

@Book{Appel02,
  AUTHOR     = {Andrew W. Appel and Jens Palsberg},
  YEAR       = 2002,
  TITLE      = "Modern Compiler Implementation in Java",
  Edition    = "2nd",
  PUBLISHER  = "Cambridge University Press"
}

@InProceedings{Benoit08,
    author = "Benoit Boissinot and Sebastian Hack and Daniel Grund
              and Benoit Dupont de Dinechin and Fabrice Rastello",
    title = "Fast Liveness Checking for {SSA}-Form Programs",
    booktitle = "CGO",
    publisher = {IEEE},
    pages = "35-44",
    year = "2008"
}

@inproceedings{Brockschmidt11,
  author = {Brockschmidt, Marc and Str\"{o}der, Thomas and Otto, Carsten and Giesl, J\"{u}rgen},
  title = {Automated detection of non-termination and nullpointerexceptions for {J}ava {B}ytecode},
  booktitle = {FoVeOOS},
  year = {2012},
  pages = {123--141},
  publisher = {Springer-Verlag}
}

@inproceedings{Brumley07,
  author    = {David Brumley and
               Dawn Xiaodong Song and
               Tzi-cker Chiueh and
               Rob Johnson and
               Huijia Lin},
  title     = "{RICH}: Automatically Protecting Against Integer-Based Vulnerabilities",
  booktitle = {NDSS},
  year      = {2007},
  publisher = {USENIX}
}

@inproceedings{Burnim09,
  author    = {Jacob Burnim and
               Nicholas Jalbert and
               Christos Stergiou and
               Koushik Sen},
  title     = {Looper: Lightweight Detection of Infinite Loops at Runtime},
  booktitle = {ASE},
  year      = {2009},
  pages     = {161-169},
  publisher = {IEEE}
}

@Article{Cytron91,
  author    = "Ron Cytron and Jeanne Ferrante and Barry K. Rosen and
               Mark N. Wegman and F. Kenneth Zadeck",
  title     = "Efficiently Computing Static Single Assignment Form
               and the Control Dependence Graph",
  journal   = {TOPLAS},
  volume    = 13,
  number    = 4,
  year      = 1991,
  pages     = "451-490"
}

@article{Denning77,
 author = {Denning, Dorothy E. and Denning, Peter J.},
 title = {Certification of programs for secure information flow},
 journal = {Commun. ACM},
 volume = {20},
 issue = {7},
 year = {1977},
 pages = {504--513},
 publisher = {ACM}
}

@inproceedings{Dietz12,
 author = {Dietz, Will and Li, Peng and Regehr, John and Adve, Vikram},
 title = {Understanding integer overflow in {C/C}++},
 booktitle = {ICSE},
 year = {2012},
 pages = {760--770},
 publisher = {IEEE}
}

@article{Ferrante87,
  author = {Ferrante, Jeanne and Ottenstein, Karl J. and Warren, Joe D.},
  journal = {TOPLAS},
  number = {3},
  pages = {319--349},
  title = {{The program dependence graph and its use in optimization}},
  volume = {9},
  year = {1987}
}

@article{Gupta08,
  author = {Gupta, Ashutosh and Henzinger, Thomas A. and Majumdar, Rupak and Rybalchenko, Andrey and Xu, Ru-Gang},
  title = {Proving non-termination},
  journal = {SIGPLAN Not.},
  volume = {43},
  number = {1},
  year = {2008},
  pages = {147--158},
  publisher = {ACM},
}

@InProceedings{Hammer06,
  AUTHOR     = {Hammer, C. and Krinke, J. and Snelting, G.},
  TITLE      = "Information Flow Control for {J}ava Based on Path Conditions in
    Dependence Graphs",
  booktitle  = {ISSSE},
  publisher  = {IEEE},
  pages      = {1--10},
  YEAR       = 2006
}

@inproceedings{Lattner04,
  author    = {Chris Lattner and
               Vikram S. Adve},
  title     = "{LLVM}: A Compilation Framework for Lifelong Program Analysis
               {\&} Transformation",
  booktitle = {CGO},
  publisher = {IEEE},
  year      = {2004},
  pages     = {75-88}
}

@article{Levy96,
  author = {Elias Levy},
  title = {Smashing The Stack For Fun And Profit},
  journal = {Phrack},
  volume = {7},
  number = {49},
  year = {1996},
  publisher = "\texttt{phrack.org}"
}

@article{Moore06,
  author = {Moore, David and Shannon, Colleen and Brown, Douglas J. and Voelker, Geoffrey M. and Savage, Stefan},
  title = {Inferring Internet denial-of-service activity},
  journal = {ACM Trans. Comput. Syst.},
  volume = {24},
  number = {2},
  year = {2006},
  pages = {115--139},
  publisher = {ACM}
}

@InProceedings{Quadros11,
  AUTHOR       = {Gabriel Silva Quadros and Fernando Magno Quintao Pereira},
  YEAR         = {2011},
  TITLE        = {Static Detection of Address Leaks},
  BOOKTITLE    = {SBSeg},
  PAGES        = {23--37}
}

@inproceedings{Rimsa10,
  author = {Andrei Alves Rimsa and Marcelo D'Amorim and Fernando M. Q. Pereira},
  title = {Efficient Static Checker for Tainted Variable Attacks},
  booktitle = {SBLP},
  year = {2010},
  pages = {},
  publisher = {SBC}
}

@techreport{Scholz08,
  author = {Scholz, Bernhard and Zhang, Chenyi and Cifuentes, Cristina},
  title = {User-input dependence analysis via graph reachability},
  year = {2008},
  source = {SMLI TR-2008-171},
  institution = {Sun, Inc.}
}

@inproceedings{Son11,
  author = {Son, Sooel and Shmatikov, Vitaly},
  title = "{SAFERPHP}: finding semantic vulnerabilities in {PHP} applications",
  booktitle = {PLAS},
  year = {2011},
  pages = {8:1--8:13},
  articleno = {8},
  publisher = {ACM}
}

@inproceedings{Tripp09,
  author = "Omer Tripp and Marco Pistoia and Stephen Fink and Manu Sridharan
    and Omri Weisman",
  title = "{TAJ}: Effective Taint Analysis of Web Applications",
  booktitle = "PLDI",
  publisher = {ACM},
  pages = "87--97",
  year = "2009"
}

@inproceedings{Velroyen08,
  author = {Velroyen, Helga and R\"{u}mmer, Philipp},
  title = {Non-termination checking for imperative programs},
  booktitle = {TAP},
  year = {2008},
  pages = {154--170},
  publisher = {Springer-Verlag}
}

@inproceedings{Wassermann07,
  author = {Wassermann, Gary and Su, Zhendong},
  title = {Sound and precise analysis of web applications for injection vulnerabilities},
  booktitle = {PLDI},
  year = {2007},
  pages = {32--41},
  publisher = {ACM}
}
